Resubmissions
20/09/2026, 19:03
260920-xqg2dsyt4m810/09/2026, 16:17
260910-trgv8sscpg810/09/2026, 15:44
260910-s6rhjsdn6y810/09/2026, 15:33
260910-sy7jssdm8w8Analysis
- max time kernel
304s - max time network
723s - platform
android-9_x86 - resource
android-x86-arm-20260325-en - resource tags
arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system - submitted
10/09/2026, 15:44
Static task
static1
Behavioral task
behavioral1
Sample
GoreBox-8-5-4.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral2
Sample
GoreBox-8-5-4.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral3
Sample
GoreBox-8-5-4.apk
Resource
android-33-x64-arm64-20260708-en
Behavioral task
behavioral4
Sample
GoreBox-8-5-4.apk
Resource
android-34-x64-arm64-20260325.1-en
Behavioral task
behavioral5
Sample
GoreBox-8-5-4.apk
Resource
android-35-x64-arm64-20260325-en
Behavioral task
behavioral6
Sample
GoreBox-8-5-4.apk
Resource
android-x86-arm-20260325-en
General
- Target GoreBox-8-5-4.apk
- Size 252.4MB
- Sample260910-s6rhjsdn6y
- SHA256 752a56a97aa4dd82c5684f0f1b0e91318bb2b5f8125331f1292c9186ea29a936
- MD5 9129c0d441b9849d58b4708ef1b3cb46
- SHA1 c63fd3d399a52b5d6c2225a7b4d68becf71460a5
- SHA512 bdca8f42dfde54d7230998e6c35e55ba4f2543765eafefc228c4ef6a6cac7a2a56bcb7bd577a7d6088f4fd7ef630fa1b49998ebc4f3be61c97a20fb35b88df8b
- SSDEEP 6291456:ToyRCfZ4AaBVlHNBiQVnwKWZmnnlrzMKvP9nZzsf:ToUCSAmxiewKWZmnnWKvVZzA
- TLSH T1E6C81262B7C19E00D7F9C03994A79AB8F8DBCE0195237EEAC912B2F65D367043479721
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Checks if the Android device is rooted. 1 TTPs 1 IoCs
ioc Process /system/app/Superuser.apk com.F2Games.GBDE - Checks Android system properties for emulator presence. 1 TTPs 6 IoCs
description ioc Process Accessed system property key: ro.product.name com.F2Games.GBDE Accessed system property key: ro.product.model com.F2Games.GBDE Accessed system property key: ro.product.device com.F2Games.GBDE Accessed system property key: ro.bootmode com.F2Games.GBDE Accessed system property key: ro.bootloader com.F2Games.GBDE Accessed system property key: ro.hardware com.F2Games.GBDE - Checks Qemu related system properties. 1 TTPs 10 IoCs
Checks for Android system properties related to Qemu for Emulator detection.
description ioc Process Accessed system property key: ro.kernel.qemu.vsync com.F2Games.GBDE Accessed system property key: qemu.gles com.F2Games.GBDE Accessed system property key: vendor.qemu.dev.bootcomplete com.F2Games.GBDE Accessed system property key: ro.kernel.android.qemud com.F2Games.GBDE Accessed system property key: ro.kernel.qemu com.F2Games.GBDE Accessed system property key: qemu.hw.mainkeys com.F2Games.GBDE Accessed system property key: qemu.sf.fake_camera com.F2Games.GBDE Accessed system property key: qemu.logcat com.F2Games.GBDE Accessed system property key: init.svc.qemu-props com.F2Games.GBDE Accessed system property key: ro.kernel.qemu.gles com.F2Games.GBDE - Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
flow ioc 27 pastebin.com 28 pastebin.com 29 pastebin.com - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.F2Games.GBDE - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.F2Games.GBDE - Reads information about phone network operator. 1 TTPs
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.F2Games.GBDE - Hides multimedia files using a .nomedia file 1 TTPs
Android's media scanner ignores any directory that contains a .nomedia file. This hides your photos, videos, and audio from the gallery and other apps.
- Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.F2Games.GBDE - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.F2Games.GBDE
Processes
-
com.F2Games.GBDE1⤵
- Checks if the Android device is rooted.
- Checks Android system properties for emulator presence.
- Checks Qemu related system properties.
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4239
Network
MITRE ATT&CK Enterprise v16
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-private-data.json
- Size 53B
- SHA256 d6166244b8592dbbaa1e6a03f6542fa98854733290b37a9acb140a3684966796
- MD5 363b0254d3a329b53d95789003543b5c
- SHA1 b2a7916a86f3fc200112d76f33ad3f1ffc5c4873
- SHA512 1fb70ee7bb99ce58de3de3376a9a7cfc0a4afaa001a1e1a59c89d8880ba347f0016be305d2ff7fd0d14d16eea4f768eff95ad23a87d52d189a14e37ed55fb701
- TLSH T12890020A2D54095DD9868E5BD160400C5761965041540D1D70CA7544520D61E3441932
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-private-data.json
- Size 93B
- SHA256 35225515a6b0b2f3d1e547d68ca1ccfc5d19f7091c8a9dfc6b48f457ebc7c2d7
- MD5 a6b57f36657a4b4f4af37731357bba08
- SHA1 a8e41912839a2dad4de7a95e7b6625b2755a5f42
- SHA512 ccc1c31af63f6a3b91220eca547820f609098b7184daeb2acc8015d7b9b07f0f10a9f1b3bddb0a4e5b8790624ead2210a27c2d70223cbc75d5e5a7338e609b3e
- TLSH T1BAB0120F0D640F2BC1838F4BD26031090A70477003480C0CE88F3004110D05D2402922
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-private-data.json
- Size 2KB
- SHA256 804208369ff2621ce3328c31ee5cd48941d12210c2bf76309b9e16fac3931037
- MD5 c8a335ee35b9c945d68792ee4dad0a28
- SHA1 ec9f6b9a50b9b768d9283ce1d5e07d165289d8c8
- SHA512 8bc85cd5d77f5a60bf0672feb85ea608ba73ba3d72fbbcbbea1498cef0bde357edf452dd3c4dcd129a3a817227ede18416d1d212dca0fc948cd446b9f96dd366
- TLSH T13141197126C02FFFE8B084179608A251AB85614A84CC652A6A6E5A0A7E38C7330B39D7
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-private-data.json
- Size 2KB
- SHA256 195de3b9ea315b4f411c7187252eb9a4bf9472944a97b01a780445d801133d31
- MD5 8aa1c2f8f6f71d4bf6443270d1894fa5
- SHA1 50055c5f5407cf16860cb24aa7af6f4753c1697f
- SHA512 027d931b229697bf3725b131c32b900dc5fe419e977eebe976bc268a3a09d4f3a9d34374fda8074a529a97fc412d51e44bc8955ccb182a9a473b731430f12106
- TLSH T174514B6025807FFFD4E0C91B9208B741EB85624644CC695A5ABE590A2F3CC6A20F3587
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-public-data.json
- Size 2B
- SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
- MD5 99914b932bd37a50b983c5e7c90ae93b
- SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
- SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
- MD5 SHA1 SHA512
- Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-public-data.json
- Size 111B
- SHA256 2adf40dda5d0b0956dd402ace9da501e75b3f95495e2390365030158eb38c28a
- MD5 65815366381b3eb8ea0f4bbdf46ca1ae
- SHA1 e169c6e0d7378a7b216185c8c18c48c287766398
- SHA512 9377398e88529e21e77e7d82bf7ea0bdf4229cc8ba53dd479c585262a35bf836ba57b602d28ad6cc3b8564c199eb2cc8f4c9b5242c718d97797baee7c31bc5ac
- TLSH T1DDB09226214876B3540122027118A490A2BA0A0AA0A0ECC108958E546D74CBC002615B
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-public-data.json
- Size 216B
- SHA256 92fdb8f2e1ab448f4c0180d9f6b9ea94c2aa61d7a27147c237ac68335c122574
- MD5 f4afc82e46e3c87425ddd6782a99cf23
- SHA1 c1e482f67f428783a99d27184d0da9c423cae3f1
- SHA512 2b2b73155e513b165183ef8f67716ce42daa3b73d2e4f723dbeb20408d8d0c5c05f00a2a7730c9f4e6bf8df8eab8faebc6025af1d6f76f80ea9893f85f728b64
- TLSH T122D0125A208877F31002660D7158E8D0F2B80E0B60E4EDC614E98F652DA1CFD006B15B
- MD5 SHA1 SHA512 TLSH
- Path /storage/emulated/0/Android/data/com.F2Games.GBDE/cache/UnityAdsCache/UnityAdsTest.txt
- Size 4B
- SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
- MD5 098f6bcd4621d373cade4e832627b4f6
- SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
- SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff
- MD5 SHA1 SHA512
- Path /storage/emulated/0/Android/data/com.F2Games.GBDE/cache/UnityAdsCache/UnityAdsWebApp.html
- Size 2.3MB
- SHA256 6be3b179c4a241e3944f8c24402a0f59688dfddd6957930a87878945da5e9a22
- MD5 5d97fbf35b2043dadf2769d3b5212aa1
- SHA1 7a7e2383ba5fdeb26fcd9ba1b2954d7515fc0090
- SHA512 8734ffed2ef4466cd7acfcf310881735974a572e537895545e2520439bc9c014901f7b0219e06dd4beb5f65e2c34a4ff776e985bca7a6151a63e0f3da375cc76
- SSDEEP 24576:Gx5s19RtnWo6fco6o/dOyS2uRqnQN37o26Whomy:s5iXtLqQN37F6Whby
- TLSH T1F1B539ADB7A1203D415360E6DE3B500EB236248ED004C7FAFC5DD5C7ABA96595B32B38
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /storage/emulated/0/Android/data/com.F2Games.GBDE/cache/UnityAdsCache/UnityAdsWebViewConfiguration.json
- Size 500B
- SHA256 d9a1468939fc8febef628af284710f79b031096aee9a36e299c6a16a64d181bf
- MD5 2fcc2ad9ca07d5b0b2ed2353033443c5
- SHA1 af79c930d9fabe5aeeff2462e4fa099238797fa7
- SHA512 a7bd9c6719deca290339bf56ae5dd44e5818193706248d8c9a774ea77c4a3f1ed0b53052935e841cc3c7bbd79765553e7c06ff5c3b40b1236e6901939731f187
- TLSH T1ECF09E5422DC7DBBDAFC1FDD5E4511EC5320B4022C04DA9DCAD92F8CA6726F72596820
- MD5 SHA1 SHA512 TLSH
- Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/Unity/c6311228-a41d-4ef9-827c-d5d6a6091e10/Analytics/ArchivedEvents/178905513500000.93a81b4b/c
- Size 1B
- SHA256 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
- MD5 c4ca4238a0b923820dcc509a6f75849b
- SHA1 356a192b7913b04c54574d18c28d46e6395428ab
- SHA512 4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a
- MD5 SHA1 SHA512
- Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/Unity/c6311228-a41d-4ef9-827c-d5d6a6091e10/Analytics/ArchivedEvents/178905513500000.93a81b4b/e
- Size 553B
- SHA256 543bb63b767c678373c2fb8a7281c4fb5d0a1807bbaf4dad3a04f3bd217ea305
- MD5 78af00a5365eedb469dd7a6cb83654dc
- SHA1 b24c60c3748de36e92d15364cee478bb740087f9
- SHA512 e3774f4e11b07ffe6e714f2ad259150d945df8c18c78d2367e8c8b5661fb61c79da84765d8b5d20b615862535b355d91e4d11e2a674d3ed2e31ef26a33d61954
- TLSH T192F0E12503856A3365EA8106597D3433AEB53160F667BCBC80F8830D1148A44A183033
- MD5 SHA1 SHA512 TLSH
- Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/Unity/c6311228-a41d-4ef9-827c-d5d6a6091e10/Analytics/ArchivedEvents/178905513500000.93a81b4b/g
- Size 1B
- SHA256 d4735e3a265e16eee03f59718b9b5d03019c07d8b6c51f90da3a666eec13ab35
- MD5 c81e728d9d4c2f636f067f89cc14862c
- SHA1 da4b9237bacccdf19c0760cab7aec4a8359010b0
- SHA512 40b244112641dd78dd4f93b6c9190dd46e0099194d5a44257b7efad6ef9ff4683da1eda0244448cb343aa688f5d3efd7314dafe580ac0bcbf115aeca9e8dc114
- MD5 SHA1 SHA512
- Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/Unity/c6311228-a41d-4ef9-827c-d5d6a6091e10/Analytics/ArchivedEvents/178905513500000.93a81b4b/s
- Size 432B
- SHA256 4cfbc3a36b557984749872c4349c484f6401c331be39e3f1468dcb50e939e3bc
- MD5 ba5d40d6cb7846b8cc81d47b31b15e48
- SHA1 8bc23985cd675d0a952026348b04e109c4547343
- SHA512 d40236135f9db0faa92340319f3407b72879220c5da5887b7931f4cafbb7c44eb8826fc3582dc3d2e52a01fbaf7382f3283cfbc196f9febb5ab9ecb906131f55
- TLSH T15FE0A37643C965326AEA81066D3934739EF53150F733BCBD90F4535D1284A0462C3432
- MD5 SHA1 SHA512 TLSH
- Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/Unity/c6311228-a41d-4ef9-827c-d5d6a6091e10/Analytics/ArchivedEvents/178905513500001.93a81b4b/e
- Size 575B
- SHA256 7aeaff84e9b8410f67bb8d2332b999220a0e56c9039ddc39125112c232d66b6c
- MD5 62ee6310402d1d99925d94e344979779
- SHA1 6e509ce0c923ad919e5b04a33e88c1165be82e67
- SHA512 5457732d81dc724274733c9776305c56addfe111cabd6e7e1250d760ef78736f762f1598b281e72d39e2c1c7b4598c085d904c0c0ad0ef60f00974beeb2d8697
- TLSH T156F0E1A603846B3369F991162A6928739EF53120F767FCBD50E8830D5268A44A193423
- MD5 SHA1 SHA512 TLSH
- Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/Unity/c6311228-a41d-4ef9-827c-d5d6a6091e10/Analytics/ArchivedEvents/178905513500002.93a81b4b/e
- Size 1KB
- SHA256 6f6715f5817d71ab6e505bdbbac20fbded0f2b8175808f51ce4e02d12ff131c0
- MD5 71c2e8fed811bc3c5deeb7822339c042
- SHA1 bb7e7a28ce7dcbac0193599da2cc6ef75bc3adb3
- SHA512 a280acf41e45b0ba631ce179fdab7e7763b4cd9ace329e8943e67672e4cd5928eee15945a22ace7216de87e5f55597365a591c635551003837b813cf1caf5a99
- TLSH T1BC3174B6DB655C7F2EB6D04A6EC76C638BE46050E796EDAEB0D4070C60889006397023
- MD5 SHA1 SHA512 TLSH
- Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/Unity/c6311228-a41d-4ef9-827c-d5d6a6091e10/Analytics/ArchivedEvents/178905513500002.93a81b4b/e
- Size 1KB
- SHA256 f5579a0673d2ac1ee95a5db5bc514a3e1a1dc1da2da7bb9db1ceb8a9d8859373
- MD5 9799ef95f3433cc6b9cd5912d3df25c3
- SHA1 d11ef8635a87c925e6780a9a90ef7fe3cd6ec732
- SHA512 40d03e0328b3ccf5d1d67e9d0785a2a5320228a89c7152b97d9cb44f81e5cdfdfc969c47cb7fd5021fe4222757608d101caceb20a7c39e832f575f59600adf4c
- TLSH T18E3162B6DB555C7F3EBAD04B6EC66CA38AE46050E796FDBEB4D8070C60889406397023
- MD5 SHA1 SHA512 TLSH
- Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/Unity/c6311228-a41d-4ef9-827c-d5d6a6091e10/Analytics/ArchivedEvents/178905514900003.93a81b4b/e
- Size 566B
- SHA256 b58959479d21d90919b60f1657e24c8fa8f3ad5715ebf91139025a9ae69942b5
- MD5 84bfb1341c3858e64bfafcc8bd54b655
- SHA1 4f5667e0b2104f28098ee20a5130f0a78633c78a
- SHA512 518f006310f063ec5a2318690575859d4bc04157f392524e37f8f3a860deb460363527f4b7474fec5a5bee3eb1dfdabd3dbd561fca58f13a3d250f1b77c3b201
- TLSH T1E5F0EB6A03892B327AF6D20B6E6D24739EB12150E667FCBD80F8531D0188E446393033
- MD5 SHA1 SHA512 TLSH
- Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/Unity/c6311228-a41d-4ef9-827c-d5d6a6091e10/Analytics/config
- Size 293B
- SHA256 83b3f90c4edf1f122c8faf9784ca0aee4dd017c65493ac181c1814211703db96
- MD5 8673a8ac0b06a9d056d08d62f857ba4b
- SHA1 a351bea1932270bafbe468584058fef20dcfc31e
- SHA512 edf28eb7fcef654f139285d308f817ee230d6f064a4c865109d6dfe6f73c11f8f35737c8159c8a302118237ab980899ba5773f547cc9da4028643a53b08e324f
- TLSH T1CBE0C2EB680035B9D9F5C3D9E92C3A6343784E370397F8156B58182C85BB2780791D27
- MD5 SHA1 SHA512 TLSH
- Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/Unity/c6311228-a41d-4ef9-827c-d5d6a6091e10/Analytics/values
- Size 133B
- SHA256 f650855b28726ea2db38284534d560ff2e27cbf5a2c14633da7baa557fdb08d2
- MD5 b53e30a352e7e92e59095ade91abcec8
- SHA1 d5853963c9b993435e6f1e12deafde4488d47fa0
- SHA512 22338f4a099dc0afa817600d7201c840df25c6fa544b891cd2c951c66af8d52b2459d9165f4a7f3f7ad75ae5d073339fddd569e223df082ba031e7629147b74c
- TLSH T1F0C02BE1C920D5771870893DA1C2AD0306DF0082CD0C2C0035680C4C84310128014657
- MD5 SHA1 SHA512 TLSH
- Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/il2cpp/Metadata/global-metadata.dat
- Size 6.0MB
- SHA256 7e78000ca9049a6afa028f3c23d5bbb9256bea70a3a196605088b405499bea90
- MD5 e363f82a7c17f5036b16873c13ca6749
- SHA1 79ec255cf5f432497b00149a1b5f385bcae49769
- SHA512 a893e6c76d00f0f88a3c16dc425310c0cdf6bac6417d94699d2e0a353e3bcdf1e8db546a0d82201697299dbd65b0160a3f2e021b3de0e832cc1f9734efc3c5b1
- SSDEEP 49152:t3RZJJDyeeIrrWynsU6BAHNeKz86EgVUbFOxVbLmLhiFdoT6OlGPab8:wIrtzdw+FMlyX
- TLSH T17856D522FAB0DA66C50562768D69CFC152309D499E42A30BB718FB7F74B32D85E03BD4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/il2cpp/Resources/mscorlib.dll-resources.dat
- Size 329KB
- SHA256 c5baa176a5b72cd545266340e42102d393a5e43d38c95796bc828918bb95277f
- MD5 21d06dbc8af6432b2b49536ed30609af
- SHA1 11a1c0e2ab2f8c06fe4507535ed47e0dd279a60d
- SHA512 2971f54eaa14c3ce6e2352e5a1aea5b044f0894bf4eac92de8cd92515b6473b5ca56ebfcad4369a9d4935cbefea2540a83f332fd4d832c37768310e8776ceb5e
- SSDEEP 3072:c5j+evAPQ48RhHkXKSmLZsumnWpevI1kMqXkD3by+BEL:crvS8rHXSmJmnjvXkSr
- TLSH T1F7746CD8B5728E76FE57A9BCE85E928D43D9C1E2C182523B3D75C2E04D52386181EE3C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/il2cpp/unity.ver
- Size 36B
- SHA256 308d45f6413e833c540ddea9ed3432cb59f7681089ce5f750c99c886a995c7c4
- MD5 7414b40ba4d4ebc709481fb0fe2bde1d
- SHA1 3e900326e8f7adb7c2962f5456122e11b58dc732
- SHA512 b8a8ced42617bdd70c274e5acc3d63be97722fa622b5db7a0ef5c9233fa984d7484f2209d394c195f5990b5a00d3457288df9bc1e583c71e104421f6df6bf658
- MD5 SHA1 SHA512